1 reply

You can only have 1 host/domain in the Access-Control-Allow-Origin header in the response sent by IHS.

If you want to be able to have a list of domains that you want to allow you need check the Origin header sent in the request and use some variables.
Let's suppose our site run on the following domains as Origin :